CVE-2022-49110: linux kernel before 5.15.34 (exclusive), from 5.16 (inclusive), before 5.16.20 (exclusive), from 5.17 (inclusive)…

Affected technology

linux kernel · before 5.15.34 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.16.20 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 5.17.3 (exclusive)
linux

Linux · 4608fdfc07e116f9fc0895beb40abad7cdb5ee3d to before 58d52743ae85d28c9335c6034d6ce350b8689951, 4608fdfc07e116f9fc0895beb40abad7cdb5ee3d to before 7cd361d5e6d986c0d4cafb9ceaa803359048ae15, 4608fdfc07e116f9fc0895beb40abad7cdb5ee3d to before 592e57591826f3d09c28d755a39ea8e9d13705ad, 4608fdfc07e116f9fc0895beb40abad7cdb5ee3d to before 2cfadb761d3d0219412fd8150faea60c7e863833, dafc95a1e473a0b857af34ecbb17b8b1c90edd75, 5892f910f401c1facfc410e0b042108f2827a77b, f68ad168e23565ce2a3891fec537cfaf8410d1e6, 7aa03980b21fdc7355e20274a68a69a0b2a45c08, 4.19.206 to before 4.20, 5.4.144 to before 5.5, 5.10.62 to before 5.11, 5.13.14 to before 5.14
Linux

Linux · 5.14
Linux

Component: Not specified by the source
File: net/netfilter/nf_conntrack_core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.